Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/g3oVk9HCRwE8wnSPPFydY0ghNk4.roa
File: g3oVk9HCRwE8wnSPPFydY0ghNk4.roa (raw, json)
Hash identifier: ep4IFLynYY99PQN+FcTxD6g/a7g2WaMjBCy1roRgQac=
Subject key identifier: 83:7A:15:93:D1:C2:47:01:3C:C2:74:8F:3C:5C:9D:63:48:21:36:4E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018669597B9059E24FE1FE19C5CE2B7F4625
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/g3oVk9HCRwE8wnSPPFydY0ghNk4.roa
Signing time: Sun 19 Feb 2023 11:05:17 +0000
ROA not before: Sun 19 Feb 2023 11:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/23 maxlen: 23
5.105.130.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.238.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.241.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.252.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.204.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:69:59:7b:90:59:e2:4f:e1:fe:19:c5:ce:2b:7f:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 19 11:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=837a1593d1c247013cc2748f3c5c9d634821364e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:da:2a:54:77:f4:a4:b0:dc:21:8c:52:56:
06:92:83:43:97:2c:df:d7:3d:da:d6:a7:f2:4a:c3:
3b:65:f3:e4:6f:35:9e:d3:4c:ef:12:eb:c7:b1:43:
b1:25:23:5a:22:3c:4a:c1:ef:87:75:d6:d7:1a:eb:
05:5b:b7:43:26:ed:4c:5c:ea:83:bc:e3:13:71:5f:
bd:2a:db:04:0b:6f:72:ac:9d:b6:6b:30:69:dc:82:
4d:08:c6:95:d6:ac:bd:82:0f:e5:c7:0b:dd:a1:c0:
48:ce:49:ec:09:72:5d:d3:ba:30:53:90:ac:30:57:
80:66:a4:16:df:92:36:26:06:b3:02:54:d6:0e:04:
78:29:42:05:d4:c9:07:5e:c2:91:1e:2c:40:f7:fe:
c8:dd:04:ca:15:3d:bb:6b:fe:8a:5b:3f:60:46:a0:
1a:82:b4:6a:2f:86:50:84:1f:17:73:1f:c4:61:7d:
78:29:5e:a0:d8:ee:aa:9a:ed:9e:4a:83:56:c1:af:
71:72:05:0a:92:00:6f:b6:57:4a:c5:76:a2:18:f1:
c8:b9:50:b7:7a:bf:68:ba:f1:14:4e:3e:6d:3e:bf:
cc:e5:86:d0:0f:90:4f:c2:de:7e:77:80:a9:51:b8:
b6:c7:68:0b:68:58:e1:ac:75:3e:61:32:8f:7b:df:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:15:93:D1:C2:47:01:3C:C2:74:8F:3C:5C:9D:63:48:21:36:4E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/g3oVk9HCRwE8wnSPPFydY0ghNk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.12.0/24
5.105.18.0/24
5.105.30.0/24
5.105.38.0/23
5.105.68.0/23
5.105.79.0/24
5.105.95.0/24
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.130.0/24
5.105.136.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.198.0/23
5.105.202.0-5.105.204.255
5.105.206.0/23
5.105.238.0-5.105.241.255
5.105.244.0/23
5.105.248.0/23
5.105.252.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1a:df:17:7e:5e:a9:7e:19:ca:74:fb:b7:db:64:76:f9:28:
ed:bc:29:82:db:04:e6:f5:25:32:da:01:fa:3d:b4:b5:70:77:
74:e9:b1:50:32:3e:e4:cb:ff:80:91:3c:bc:77:d9:16:a6:ea:
46:97:0d:a0:e1:d5:bf:25:71:7d:dc:0c:5b:7d:69:e1:14:4d:
b3:d9:41:2f:b6:58:e7:b8:d2:eb:3c:f8:0e:c9:ca:98:45:09:
8f:50:f4:4a:fe:6b:d7:da:70:6e:26:be:9e:0f:89:9b:1d:3e:
f6:75:9f:8e:a4:9c:d7:ca:4a:6c:c3:28:37:67:f6:44:a1:3b:
22:0a:03:c8:75:c9:f3:b8:d6:3c:07:f3:89:77:c2:b0:13:93:
6b:9c:f5:e8:32:2a:3e:81:0e:fb:9d:dd:cd:d0:e6:8d:49:26:
45:c8:e2:86:64:1c:56:28:52:5a:bc:2b:f6:cd:c6:ea:f3:eb:
95:83:09:af:dc:1d:39:5d:9a:26:6e:35:43:61:61:72:65:27:
d5:8a:62:2d:e8:7f:de:b8:5f:3b:cc:e8:21:d0:e6:62:c4:81:
58:a5:4b:a0:17:f9:9f:15:c9:48:bc:2b:9f:6b:43:52:11:da:
dd:10:a5:31:60:4e:32:19:ed:be:e1:b6:d5:6f:0e:ed:6f:bb:
55:7f:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org